Amendments to the Claims: 

1 . (Currently Amended) A method of performing network packet 
filtering, said method comprising: 

dividing a set of rules along N dimensions; 

dividing each of said N dimensions into rule ranges using said set of rules; 
generating a set of possible rules for each rule range in each of said N dimensions; 
searching said rule ranges along said N dimensions in parallel to select N sets of 

possible rules along said N dimensions; 
logically combining said N sets of possible rules to generate a final set of rules; 
applying said final set of rules; 

repeating said steps of searching, logically combining, and applying for each 

packet to filter; 
receiving a new rule; 

examining the new rule to determine if the new rule specifies a new dimension; 
and 

if it is determined that the new rule specifies a new dimension, adding the new 
rule to the set of rules, adding the new dimension to the N dimensions, 
r e p e ating said st e ps of dividing said set of rules along N +_1 dimensions, 
dividing each of said N +J_ dimensions into rule ranges using said set of rules, 
and generating a set of possible rules for each rule range in each of said N + 1 
dimensions wh e n a n e w rul e not specifying a n e w dim e nsion is add e d to said 
s e t of rul e s; and 
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r e p e ating said steps of dividing e ach of said N dim e nsions into rul e rang e s using 
said s e t of rul e s, and g e n e rating a s e t of possibl e rul e s for e ach rul e range in 
e ach of said N dim e nsions wh e n a n e w rul e sp e cifying a n e w dim e nsion is 
add e d to said s e t of rul e s . 

2. (Previously Presented) The method as claimed in claim 1 wherein 
generating a set of possible rules for each rule range in each of said N dimensions 
comprises generating a rule bit vector for each rule range along each of said N 
dimensions. 

3. (Previously Presented) The method as claimed in claim 1 further 

comprising: 

generating a search structure for each of said N dimensions to locate a specific 
rule range. 

4. (Original) The method as claimed in claim 3 wherein one of said search 
structures comprises a look-up table. 

5. (Original) The method as claimed in claim 3 wherein one of said search 
structures comprises a tree search structure. 
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6. (Previously Presented) The method as claimed in claim 1 wherein 
applying said final set of rules comprises selecting a highest priority rule in said final set 
of rules. 

7. (Previously Presented) The method as claimed in claim 1 wherein 
applying said final set of rules comprises applying more than one rule in said final set of 
rules. 

8. (Original) The method as claimed in claim 1 wherein each of said N 
sets of possible rules comprise a rule bit vector that specifies a set of rules that may apply. 

9. (Original) The method as claimed in claim 8 wherein said rule bit 
vectors are logically ANDed together to produce a final bit vector of rules that apply. 

10. (Previously Presented) The method as claimed in claim 9 wherein 
applying said final set of rules comprises selecting a highest priority rule in said final set 
of rules. 

11-27. (Canceled) 

28. (Currently Amended) The method as claimed in claim +9 i wherein 
each rule range comprises a range identifier. 
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29. (Previously Presented) The method as claimed in claim 28 wherein 
said range identifier comprises a rule bit vector that specifies a set of rules that may apply 
to incoming data units that fall within the associated rule range. 

30. (Previously Presented) The method as claimed in claim 29 wherein 
said rule bit vectors are logically ANDed together by a rule processor to produce a final 
bit vector of rules that apply. 

31. (Previously Presented) The method as claimed in claim 28 wherein 
said range identifier comprises an index value. 

32. (Previously Presented) The method as claimed in claim 31 wherein 
said index values are used by a rule processor to index into a N dimensional look-up table 
for a final rule. 
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